{
  "permissions": {
    "allow": [
      "Bash(npm run lint)",
      "Bash(npm run test *)"
    ],
    "deny": [
      "Read(./.env)",
      "Read(./.env.*)",
      "Read(./secrets/**)"
    ],
    "disableBypassPermissionsMode": "disable"
  }
}

---
name: release-notes
description: Writes customer-facing release notes from merged pull requests. Use when the user asks for release notes, a changelog or what shipped this week.
allowed-tools: Read Grep
---

1. List the pull requests merged since the last release tag.
2. Group them into New, Improved and Fixed. Skip refactors and chores.
3. Write 1 line per change for customers, not engineers: what they can do now.
4. Add the notes to CHANGELOG.md under today's date and show the diff.

{
  "extraKnownMarketplaces": {
    "acme-tools": {
      "source": { "source": "github", "repo": "acme/claude-tools" },
      "autoUpdate": true
    }
  },
  "enabledPlugins": {
    "team-skills@acme-tools": true
  }
}

name: Morning PR digest
on:
  schedule:
    - cron: "0 7 * * 1-5"   # 7:00 UTC, weekdays
jobs:
  digest:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: "List open pull requests waiting more than 24 hours for review, with author and size, and summarize what merged yesterday."
          claude_args: "--max-turns 10"

{
  "env": {
    "CLAUDE_CODE_ENABLE_TELEMETRY": "1",
    "OTEL_METRICS_EXPORTER": "otlp"
  }
}